GDPR

Effective date: 1 March 2026


1. Details and contact information of the Controller

Name: Pannon-Quality Menedzsment Tanácsadó Kft.

Registered seat: 2040 Budaörs, Kisfaludy utca 36. 2., Hungary

Company registration number: 13 09 234845

Tax number: 12341445-2-13

Representative: Sándor Toldi (Managing Director)

Email: info@pannonquality.hu

Phone: +36-30-933-1753

Website: https://pannonquality.hu

2. Purpose of this notice, legal bases, definitions
  • Purpose: to transparently present the personal data processed, the purposes and legal bases of processing, retention periods, recipients, and data subjects' rights.
  • Applicable law: GDPR (EU) 2016/679; Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information ("Infotv."); Act C of 2000 on Accounting ("Sztv."); Act CXXVII of 2007 on Value Added Tax ("Áfa tv."); the Hungarian Civil Code ("Ptk.").
  • Definitions: as set out in Article 4 of the GDPR.


3. Processing activities
3.1. Entering into and performing contracts (B2C/B2B)

Purpose: creating, recording and performing contracts; handling warranty/guarantee and other claims; invoicing.

Data subjects: private individual clients/sole traders; contact persons of corporate partners.

Categories of data: for private individuals/sole traders: name, address, place/date of birth, mother's name; signature (for written contracts); sole trader registration number; billing/delivery details; contact details; order, payment, performance, and warranty/guarantee data; certificates of performance/working-time records. For contact persons: name, position, company, email, phone number.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)); legal obligation – accounting/VAT (GDPR Art. 6(1)(c)); for contact persons, legitimate interest (GDPR Art. 6(1)(f)).

Retention: for the duration of the contract and the limitation period for claims (generally 5 years); accounting records: 8 years (Section 169 of the Accounting Act).

3.2. Customer service and contact (email/phone/post, contact form)

Purpose: recording and responding to inquiries; enabling traceability where necessary.

Data subjects: prospective clients, clients, partners.

Categories of data: name, email, phone number, subject and content of the message, date/time; for postal letters, the sender's name/address and date of delivery.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

Retention: until the purpose has been fulfilled; up to 5 years where a claim may reasonably be expected; otherwise a maximum operational retention period of 30 days.

3.3. Social media presence (Facebook)

Purpose: corporate presence, information, recruitment, interaction.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

Note: due to how the platform operates, joint controllership with the platform operator (Meta) may apply; detailed rules are set out in that provider's own privacy notice.

3.4. Website logging

Purpose: ensuring the proper and secure operation of the website; investigating traffic and misuse.

Categories of data: (partial) IP address, time of visit, device/OS/browser type.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

Retention: typically 7 days, followed by automatic deletion.

3.5. Use of cookies

What is a cookie? A small file that is stored in your browser while you use the website.

Categories: strictly necessary cookies (legal basis: legitimate interest), statistical cookies (legal basis: consent), marketing/comfort cookies (legal basis: consent).

Cookie name Purpose of the cookie Legal basis Storage period
buildr_live_session A cookie used by the site to retrieve session state between sessions.

legitimate interest – GDPR Art. 6(1)(f)
(based on a balancing-of-interests test)



 end of session
XSRF-TOKEN A cookie used by the site to retrieve session state between sessions. end of session
cookies-state Stores cookie consent information. end of session

4. Recipients and data processors

In addition to its own staff, the Controller may engage external service providers (data processors).

  • Hosting/operation: Hetzner Online GmbH (EU, Germany) – web server/infrastructure.
  • Web analytics / video: Google Ireland Ltd. (GA4), YouTube LLC – cookie-based statistics and embedded content.
  • Social media platforms: Meta Platforms Ireland Ltd. (Facebook)


International data transfers: transfers outside the EEA may occur with certain service providers; legal basis: EU Standard Contractual Clauses (SCCs) and supplementary safeguards.

5. Data security

The Controller applies appropriate technical and organisational measures (access control, password protection, logging, regular backups, vulnerability management), in line with the principle of "necessity and proportionality".

6. Handling of data breaches

In the event of a breach: risk assessment, remedial measures, and, where required, notification to the supervisory authority within 72 hours; where the risk is high, notification to the affected data subjects. A breach register is maintained.

7. Rights of data subjects
  • Withdrawal of consent (where the legal basis is consent).
  • Access to the personal data processed and the right to request information.
  • Rectification of inaccurate data.
  • Erasure ("right to be forgotten") under the conditions set out in the GDPR.
  • Right to request restriction of processing.
  • Data portability (where the legal basis is contract or consent).
  • Right to object, where the legal basis is legitimate interest.


Requests may be submitted to: info@pannonquality.hu or by post to: 2040 Budaörs, Kisfaludy utca 36. 2., Hungary.
Response time: as a general rule, 1 month (extendable by a further 2 months where justified).

Complaints: National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa u. 9–11., Hungary
Phone: +36-1-391-1400
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu

Judicial remedy: proceedings may also be brought before the competent regional court (törvényszék) of the data subject's place of residence or habitual abode.

8. Summary of cookie use (separate Cookie Notice)

Detailed, up-to-date information on the cookies used on the website is provided in a separate Cookie Notice.

9. Final provisions
  • This notice may be updated as our services and applicable law change.
  • The version in force at any given time is available on the website.
  • This document applies solely to the data processing activities of Pannon-Quality Menedzsment Tanácsadó Korlátolt Felelősségű Társaság.